# Access Control

Depending on your credentials setup, you will have access to either:

* all resources within your operator account
* OR all resources from defined teams only within your operator account

## Access to all resources within operator

If no team restrictions are present (`consumer.teamIds` is empty) you can access any resource within your operator (`consumer.operatorId`).

## Restrict access to resources from specific teams

If team restrictions are present (`consumer.teamIds` contains a list of team ids) you can access any resource within the listed teams.

You can use the [`/auth/me`](/api/authentication#obtain-information-about-current-api-consumer) endpoint to retrieve information about scope, restrictions on teams etc. A sample response looks like:

```json
{  
  "name": "Monta API Demo",  
  "operatorId": 42,  
  "teamIds": [],  
  "clientId": "73d86c7f-48de-4a0f-bd3c-da243e16b630",  
  "rateLimit": 1000,  
  "rateLimitIntervalInSeconds": 600,  
  "scopes": [  
    "all:delete"  
  ]  
}
```

This credential has access to all resources within operator with id `42` (no restrictions on `teamIds`). Since the scopes collection contains `all:delete`, you can call any of our endpoints with this.